Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/lOpwNd2zYlUKssheWNhqMO4XwIg.roa
File: lOpwNd2zYlUKssheWNhqMO4XwIg.roa (raw, json)
Hash identifier: tz/5CBDemjTaGuSgaoO7W+HGSIKRIM7NsVHP40csRG4=
Subject key identifier: 94:EA:70:35:DD:B3:62:55:0A:B2:C8:5E:58:D8:6A:30:EE:17:C0:88
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 018BA07FDD69CD4E6585709A094A4685032C
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/lOpwNd2zYlUKssheWNhqMO4XwIg.roa
Signing time: Sun 05 Nov 2023 17:20:16 +0000
ROA not before: Sun 05 Nov 2023 17:20:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216169
IP address blocks: 185.26.32.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a0:7f:dd:69:cd:4e:65:85:70:9a:09:4a:46:85:03:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Nov 5 17:20:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=94ea7035ddb362550ab2c85e58d86a30ee17c088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:11:6f:de:b7:d8:61:eb:32:72:bb:3a:d7:6d:
f9:a5:5e:27:10:17:0f:17:5f:d4:95:86:37:d8:30:
3f:13:21:b5:37:2e:81:cd:82:9a:25:74:07:15:ab:
b3:11:2c:87:46:c4:9e:f8:73:03:5a:f7:2e:c8:73:
f2:53:9b:49:9e:86:f5:74:db:5e:7c:b4:09:08:55:
5e:51:b3:16:9c:f1:a9:4b:24:2e:c9:57:53:ad:26:
9b:51:3a:f3:53:9e:27:33:98:48:da:22:17:ee:3d:
93:f6:f7:c7:a5:65:e6:78:28:36:3d:d1:a1:72:e6:
5d:3f:81:85:c0:74:54:a3:c0:f4:87:54:4d:bc:0f:
5c:c9:2e:15:17:61:59:05:1f:d8:cb:a6:c5:71:f1:
19:0c:3a:ad:a9:86:71:43:b9:c3:ef:82:20:58:6d:
cf:40:9c:52:24:98:32:b4:c2:58:89:ec:64:04:a6:
91:1d:21:58:bd:fa:85:e5:1d:d5:13:0c:6f:fb:f3:
2a:f5:4a:72:42:fd:9d:ad:06:ba:e1:43:1f:ad:46:
38:24:2e:63:c2:08:93:ec:f6:c4:4d:21:bc:d6:58:
3a:ca:2c:e4:be:35:13:e2:52:58:13:1e:2f:1d:e4:
b4:a0:0e:9a:db:25:2a:8e:83:69:f6:71:e7:8e:19:
90:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:EA:70:35:DD:B3:62:55:0A:B2:C8:5E:58:D8:6A:30:EE:17:C0:88
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/lOpwNd2zYlUKssheWNhqMO4XwIg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.26.32.0/23
Signature Algorithm: sha256WithRSAEncryption
a8:a6:8f:b9:d6:d6:ab:92:d9:0b:60:36:09:3b:f7:68:c0:f4:
f3:e7:97:42:22:6e:13:b7:42:bf:ce:36:42:cc:72:76:77:0c:
df:d4:cd:e1:0d:8a:ce:26:56:79:69:62:fb:fc:a0:06:6f:01:
fc:79:d9:f0:15:7e:5a:65:29:9a:29:a8:42:dc:fb:d9:b6:99:
49:52:b2:c9:b6:70:ab:09:66:b5:0a:af:1e:f7:ec:2f:8c:06:
19:4f:dc:cd:74:b8:b4:66:e5:58:31:f7:87:34:e4:8f:fd:c3:
f1:99:33:40:c5:2a:2e:e7:32:d2:a7:e4:4c:19:fa:ee:bd:0f:
2d:b5:d9:16:86:0e:f7:71:e6:48:89:77:01:7e:71:d5:d0:ac:
91:11:9d:9f:f6:08:d9:10:3c:37:3d:e3:ba:16:10:2c:75:f9:
54:79:50:25:0a:d3:d4:74:e0:5b:38:4e:8d:e0:46:ce:5a:f7:
98:13:d5:38:8f:83:90:45:e9:f7:ed:ee:78:ea:56:2d:ff:d3:
3b:6e:bd:3b:3e:e6:97:90:3c:61:1c:4c:f7:b4:38:ef:a1:96:
2d:bb:70:de:09:5c:fa:d8:07:1c:90:3d:ed:9c:98:d9:aa:f0:
b3:55:52:cc:8e:01:03:91:26:3b:2f:80:02:ae:2d:4b:e6:1b:
b2:dc:aa:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:22:22 2025 by rpki-client